Resolve unknown recovery outcomes from evidence

This commit is contained in:
2026-08-03 05:00:08 +02:00
parent 5bfbe9a887
commit 7e59a7f2b3
3 changed files with 117 additions and 0 deletions
+8
View File
@@ -26,3 +26,11 @@ Evidence and metadata may contain opaque references, digests, counts, and
provider result codes. They must never contain credentials or resolved secrets.
Ops is the platform surface for unresolved operation status; owning modules must
provide the reconciliation action and business-level explanation.
An owning module may reconcile an `outcome_unknown` provider effect through the
claimed durable handle's `resolve_unknown` method. External evidence that the
effect occurred records verified success. Evidence that it did not occur moves
the operation through recovery-required and recovering to verified recovered,
so any later attempt must use a new deliberate idempotency key. The method does
not infer provider state and requires the same terminal verification structure
and hash-chain checks as ordinary completion.